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Abstract A three-party scheme for securely sharing an arbitrary unknown single-qutrit 
state is presented. Using a general Greenberger-Horne-Zeilinger (GHZ) state as the quantum 
channel among the three parties, the quantum information (i.e., the qutrit state) from the 
sender can be split in such a way that the information can be recovered if and only if both 
receivers collaborate. Moreover, the generation of the scheme to multi-party case is also sketched. 

PACS numbers: 03.67.Hk, 03.67.Dd, 03.65.Ud, 89.70. +c 
I. Introduction 

Secret sharing was proposed firstly by Blakley et al[l] in 1979. It can be depicted, in the simple case, as that 
a secret is divided by a sender into two pieces for two receivers. The secret can be reconstructed only if both 
receivers act in concert and neither of them can get anything about the original message solely. In 1999, this 
concept was generalized to quantum scenario by Hillery, Buzek, and Berthiaume (IIBB)[2]. They endowed 
it a novel concept of quantum secret sharing (QSS). QSS is likely to play a key role in protecting secret 
quantum information, e.g., in secure operations of distributed quantum computation, sharing difficult-to- 
construct ancilla states and joint sharing of quantum money, and so on. Hence, after HBB's pioneering work, 
QSS, as an important branch of quantum communication, has so far attracted a great deal of attentions [3-28]. 

All the QSS works concentrate essentially on two kinds of problems. One deals with the QSS of classical 
messages (i.e., bits) [2-14]; another deals with the QSS of quantum information [2, 15-28], where the secret is 
an arbitrary unknown quantum state. The former is usually referred as quantum secret sharing (QSS); the 
latter as quantum state sharing (QSTS), which was first clearly termed by Lance et al. in 2004[19]. As far as 
QSTS is concerned, the first scheme was presented in 1999 by using a three-qubit or a four-qubit Greenberger- 
Horne-Zeilinger (GHZ) state for securely sharing an arbitrary unknown single-qubit state[2]. Soon later, 
Cleve et al.[15] investigated a more general quantum (fc,n) threshold QSTS scheme. Bandyopadhyay[16] 
proposed a QSTS scheme using optimal methods in 2000, and Hsu [17] proposed other QSTS scheme based on 
Grover's algorithm in 2003. Recently, Li et al.[18] proposed an QSTS scheme for sharing an unknown single- 
qubit state with a multipartite joint measurement. Some QSTS schemes were implemented in cavity QED[21- 
22]. Zhang et al.[23] proposed a multiparty QSTS of an arbitrary unknown single-qubit state via photon 
pairs. Lance et al.[24] proposed other continuous- variable QSTS scheme via quantum disentanglement. Deng 
et al. [25-26] proposed two QSTS schemes for sharing an arbitrary two-qubit state based on entanglement 
swapping. Li et al.[27] proposed an efficient symmetric multiparty QSTS scheme of an arbitrary m-qubit 
state with m GHZ states. Very recently, Gordon and Rigolin[28] proposed two new QSTS protocols where 
the quantum channels are not maximally entangled states. Note that all these QSTS protocols except for 
that in Refs. [18,24], however, only treat single-particle quhit or multi-particle quhit state. In this paper, we 
will propose a QSTS protocol for sharing an arbitrary unknown single-particle qutrit state. 

This paper is organized as follows. In section II, a three-party QSTS scheme is presented by using 
quantum entanglement swapping, and the scheme security is analyzed. In section III, the three-party QSTS 
scheme is generalized to a multiparty case. Finally, some summaries are given in section IV. 
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II. Three-party qutrit-state sharing scheme 



Suppose there are three legitimate users. Ahce is the sender of quantum information (i.e., an imknown 
qutrit state), Bob and Charlie are two agents. Any agent can reconstruct Alice's quantum information by 
collaborating with the other agent. Suppose Alice owns qutrits 1 and 2, Bob qutrit 3 and Charlie qutrit 4. 
The combined state of four particles is 



where 



|*)l234 = \P)l O |V')234, 



|P)i = a|0)i+/J|l)i+7|2)i, 



(1) 



(2) 



1^)234 = ^(1000)234 + 1111)234 + 1222)234) 



(3) 



and a, /3 and 7 are complex and satisfy |ap + + |7p = 1- Alice wants to send her arbitrary unknown 
single-qutrit state |P)i in such a way that anyone of the two agents Bob and Charlie can reconstruct the 
unknown state with the other's help. In order to achieve her goal, Alice performs a generalized Bell-state 
projective measurement on her qutrit pair (1, 2). After Alice's measurement, the system's state evolves to 
one of the following nine possible results: 



where 



|*oo)i2(*oo|^) = ^|*oo)i2(a|00)34 + /3|ll)34 + 7122)34), 



|*oi)i2(*oil*) = 3l*oi)i2(a|ll)34 + /3|22)34 +7100)34), 



|*02)l2(*02|$) = 31*02)12(^122)34 + /3|00)34 + 7111)34), 



|*10)l2(*10 
|*2o)l2(*20 
|*ll)l2(*ll 
|*2l)l2(*21 
|*12)l2(*12 
|*22)l2(*22 



$) = i|M/io)i2(a|00)34 + e-'^'/'p\n)u + e-''^''/''j\22)s^), 
*) = ^|*2o)i2(a|00)34 + e-4-V3^|ii)3^ + e-8W3^|22)34), 
«>) = ^|*ii)i2(q| 11)34 + e-2"/3^|22)34 + 6-4-/3^100)34), 
$) = ^|*2i)i2(a| 11)34 + 22)34 + e-8W3^|oo)34), 

$) = ^|*i2)i2(a|22)34 + e-2-/3^|oo)34 + e-4-'/37|ll)34), 



$) = ^|*22)i2(a|22)34 + e-4'^'/3/3|00)34 + e-«"'/37|ll)34). 



|*nm) =5Ie'"'"^'li)«'l(i + m)mod3)/\/3, ne {0,1,2}, me {0,1,2}. 

3=0 



(4) 
(5) 
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(8) 
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(11) 
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For each possible result, the treatment is similar in this paper. As an enumeration, only one result is taken 
as an example hereafter. Without loss of generality, suppose Alice's measurement result is |^'oo)i2- In this 
case, the qutrits 3 and 4 collapse to the entangled state 

1^1)34 = ^(a|00)34 + /3|11)34 + 7122)34). (14) 

This state can be rewritten as 

1^1)34 = ^(a|00)34 + /3|ll)34 + 7122)34) 

= i[^|?o)3H0)4+/?|l)4 + 7|2)4) 

+ -L|a)3(a|0)4 + e-2W3^|l)4 + e-4"/M2)4) 

+ -L|e2)3(a|0)4 + e-^-/3/3|l)4 + 6-2-/3712)4)], (15) 

where 

|eo) = ^(|0) + |l) + |2)), 

|a) = ^(|0)+e2"/3|l) + e4-/3|2)), 

|6) = ^(|0)+e^-/3|l) + e2-/3|2)). (16) 

The three states {\^t),t = 0,1,2} are related to the computation basis vectors {|0), |1), |2)}, and form a 

complete orthogonal basis set of a single-qutrit Hilbert space. After her measurement, Alice publishes her 

result |^'oo)i2 and assigns either Bob or Charlie (she makes the choice at random) to measure his qutrit in the 

complete orthogonal basis set proposed above. Without loss of generality, suppose Bob is assigned. If Bob's 

measurement result is |^o)3- the qutrit 4 (in Charlie's possession) is projected onto q;|0)4+/?|1)4+7|2)4. This 

state is exactly the original state \P). Now Charlie cooperates with Bob to get his result over a public channel. 

With Bob's help, Charlie reconstructs the original state with no unitary operation. While Bob's measurement 

result is 1^1)3, the qutrit 4 is projected onto a|0)4 + e~'^'^^/^(3\l)i + e~^'^^/^^\2)i. Charlie reconstructs the 
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original state \P) by performing an unitary operation U\ = ^'^'^^^^^\3){j\ under Bob's help. Similarly, 

if Bob's measurement result is [^2)3, the qutrit 4 is projected onto a|0)4 + e~'^'^'^/^ I3\1)a + e~'^'^^/^^\2)4. In 

this case, conditioned on Bob's classical bit for his result Charlie recovers the original state \P) by carrying 
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out an unitary operation U2 = ^ ^'^^^^^^\3){3\- So far, we have demonstrated the three-party qutrit state 

sharing scheme of an arbitrary unknown single-qutrit state. Note that in the above scheme Alice assigns the 
agent Bob to measure the qutrit 3 and the agent Charlie to reconstruct the original state \P). While the 
agent who is assigned by Alice to do a single-qutrit measurement is Charlie and Bob is assigned to recover 
the quantum information. As the symmetry, the above procedure is also feasible. Here we do not state it 

anymore. 

Now let's analyze the scheme security. We consider two kinds of eavesdroppers. 

(a) Outside eavesdropper: Suppose there is an illegitimate user named Eve. She wants to gain the quantum 
information which Alice lets Bob and Charlie share. To achieve her goal, she entangles an ancilla with the 
quantum channel during the particle distribution process. For this case, the security check of the present 
three-party qutrit state sharing scheme is very similar to that of the protocol proposed by Hillery et al.[2]. 
That is, the security depends completely on whether the three legitimate users have securely shared the 
entangled GHZ state which are taken as the quantum channel. Here we briefly review the check method. 
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The legitimate user Alice choose randomly a single-qutrit measurement basis (MB) {|Ct),t = 0,1,2} or 
{|0), |2)} to measure her qutrit. After her measurement, Alice tells the other two legitimate users Bob 
and Charlie which MB she has chosen for her qutrit. Bob and Charlie use the same MB as Alice to 
measure their respective qutrit. Their measurement outcomes should be strongly correlated. If there exists 
an eavesdropper Eve in the quantum line, her operation will of course introduce some disturbance which 
will cause some qutrit errors. Thus, when the legitimate users publicly compare their results, they will 
find some incorrelation which means that the quantum channel is disturbed. Alternatively, there may exist 
an eavesdropper Eve. In this case, the quantum sharing process is aborted. Incidentally, in our scheme 
the qutrit GHZ state is assumed to be safely shared among legitimate users. This can be achieved using 
the quantum purification and distillation or quantum repeater techniques if the quantum channel noise or 
decohercnce is taken into account [29-34]. 

(b) Inside eavesdropper: suppose one of two legitimate agents (say. Bob) is dishonest. He wants to solely 
and safely recover Alice's quantum information without any assistance from Charlie. To achieve his goal, 
Bob captures the qutrit Alice sends to Charlie and then sends Charlie a fake qutrit he has prepared before. 
In this case, only when Alice designates him to reconstruct the state, he can successfully get the state \P) 
and avoid the security detection. However, if Alice designates not Bob but Charlie to reconstruct the state, 
then the state reconstructed by Charlie will differ from the state Alice has sent. In this case, if Alice and 
Charlie publicly compare the state, the eavesdropping can be disclosed. Hence, the success probability for 
the dishonest Bob is only 50% in each run. During the whole sharing process, if the amount of the check 
state is large enough, then the dishonest Bob will be revealed. 



III. Multi-party qutrit-state sharing scheme 



Now let us generalize the three-party qutrit state sharing scheme to multi-party case. Suppose there are 
iV + 1 legitimate users. Alice is the quantum information sender. By the way, the quantum information 
is still given by the equation 1. The other N users are Alice's agents, named as Bob (1st agent), Charlie 
(2nd agent),..., Zach (A''th agent), respectively. All the legitimate users have successfully shared in advance 
a general {N + 1)— qutrit GHZ state 

|V'')23...(iV-|-2) = -y|(|00...0)23...(Ar+2) + |ll-"l)23...(JV-|-2) + |22...2)23...(jV-|-2))- (17) 

Qutrit 2 belongs to Alice, and qutrits 3, 4,...(iV -|- 2) to Bob, Charlie, ...Zach, respectively. Similarly, in order 
to split her quantum information into A'' parts for her A'' agents, Alice performs a generalized Bell-state 
projective measurement on her qutrit pair (1,2) and publishes her result. After the generalized Bell-state 
projective measurement, the system's state evolves to one of the following nine possible results: 

|*00)l2(*00|$') = ^|*00)l2(a|00...0)34...(jv+2) + /3|ll-l)34...(iV+2) + 7|22...2)34...(;v+2)), (18) 
|*0l)l2(*0l|*') = ^|*0l)l2(a|ll...l)34...(JV+2) + /3|22...2)34...(jv+2) + 7|00...0)34...(]V+2)), (19) 
|*02)l2(*02|*') = ^i«'02)l2(a|22...2)34...(A,+2) + /3|00...0)34...(jv+2) + 7|ll-l)34...(]V+2)), (20) 
|*10)l2(*10|$') = ^|*10)l2(a|00...0)34...(Ar+2) +e-2W3^|ll...l)34...(^+2) +e-^"'/'7|22...2)34...(w+2)),(21) 
|*20)l2(*20|$') = ^|*20)l2(a|00...0)34...(iV+2) +e-^"'/^/3ill...l)34...(iV+2) +e-^"'/S|22...2)34...(Ar+^^ 
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|M/ii)i2(M/ii|$') = 3|M/ii)i2(a|ll...l)34...(iv+2) + e-2"*/3/3|22...2)34...(jv+2) + e-^"/37|00...0)34...(jv+2)), (23) 
|*2i)i2(*2i|$') = ^|M^2i)i2(a|ll...l>34...(iv+2) + e-4'^*/3^|22...2)34...(;v+2) + e-^^'/^j\00...0)u...iN+2)), (24) 
|*12)l2(*12|$') = ^|*12)l2(a|22...2)34...(jv+2) +e-2W3^|00...0)34...(iv+2) + e-^"'/'7|ll"-l)34...(Jv+^^ 

|*22)l2(«'22|$') = ^|^22)l2(a|22...2)34...(jv+2) + e-^^'^"" f3\00...0)34...(N+2) + 6-^"'/^ 11- - 1)34... (W+2) ) • (26) 

This means that Ahce can get anyone of the nine possible results. Similar to the three-party case, without 
loss of generality we only take one result as an enumeration hereafter. Suppose Alice's measurement result 
is ^'00)12- In this case, the state of the qutrits 3, 4, {N + 2) is 

|J^2)34...(iV+2) = ^(a|00...0)34...(jv+2) + /?|ll-l)34...(JV+2) + 7|22...2)34...(;v+2))- (27) 

This state can be reexpressed as 

|-f'^2)34...(iV+2) 

= ^(a|00...0)34...(jv+2) + /3|ll-l)34...(Ar+2) + 7|22...2)34...(;v+2)) 

. 2 2 2 2 2 

= (;^)""^ E E - E E - E (28) 

!l=0i2=0 l,n-l=0 1^+1=0 In=0 

where 

m-l N 

L=Y.h+ E (29) 

Alice can assign any agent to reconstruct the unknown state. In other words, anyone of the N agents has the 
chance to reconstruct the unknown state. After Alice's assignment, all the other agents should perform some 
operations and then help the assigned agent to reconstruct the state. Without loss of generality, we assume 
Alice assigns the mth agent to reconstruct her original state. According to the equation 28, after the other 
A'' — 1 agents' measurement the qutrit in the mth agent's possession is left into Q!|0)j„+2 
^g-47rjL/3|2^^^2. If all the other agents collaborate with the assigned agent, he/she can reconstruct the 
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original state \P) in his/her qutrit by performing the unitary transformation = ^ e^'^'^^/^|j)(j|. 

The security of the multi-party qutrit state sharing scheme is same as the security of the three-party 
qutrit state sharing scheme: any eavesdropping leads to the discrepancy between the state that Alice 
sends and the state that legitimate user reconstructs. Thus an eavesdropping can be detected by publicly 
comparing a subset of the quantum states. 

IV. Conclusion 

In summary, an interesting work for quantum state sharing of an arbitrary unknown single-qutrit state 
has been done. In this paper, we take a general GHZ state as the quantum channel. The state sender Alice 
performs a generalized Bell-state projective measurement and publishes her measurement result. As the 
symmetry, anyone (the receiver) of the N agents can regenerate the original state when he/she collaborates 
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with the others. The other agents are required to perform one single-qutrit measurement on their respective 
qutrit. Conditioned on AUce's two classical bits, the receiver can reconstruct the original state via an 
unitary transformation only when he/she gets the other agents' help. In addition, we use multi-qutrit 
entangled stat, instead of EPR pairs, as the entangled quantum system, and it is more useful in maintaining 
security. 
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